Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

A friends daughter was having alot of problems with her computer after downloading a "spyware alerter" program..... go figure this is what brought in a bundle of trojans and other stuff.... after getting her computer home with me, I was able to get IE to stay stable enough to update the OS (XP) and then install McAfee. McAfee found over 170 items and claimed to remove or quarantined them. then I was able to install Ad-Aware and it found about 130 items and removed all of them, and then I installed SpyBot S&D and it found about 70 or so, and I was able to immunize everything after about an hour of it trying to immunize.... after all this, I still have issues with IE7 (updated through the new updates I had to do to allow McAfee to install because it demanded the computer be service pack 2). I installed FireFox and it still causes IE7 to popup and stuff... there is no effect when I use Opera, but the owner of the computer doesnt like Opera, she likes IE and FF.... so here I am asking for help in getting to the root of this..Below is a copy & paste of the HJT from her computer.Thanks all.Wolfie

Hi, firstly when you post to the thread can you copy and paste your logs into the post and not attach them.Can you uninstall, "HijackThis v1.99.1" this is the old version, via control panel,add and remove programs.

* Doubleclick HJTInstall.exe to install it. * By default it will install to C:\Program Files\Trend Micro\HijackThis . * Click on Install. * It will create a HijackThis icon on the desktop. * Once installed, it will launch Hijackthis. * Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad. * Copy/Paste the log to your next reply please.

Don't use the Analyse This button, its findings are dangerous if misinterpreted.Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Sorry, the version I got was posted here on this site.... I have uninstalled the version I had and ran the exe version you pointed me to, it did not install, it just ran.... here is a copy and paste of the log:

Can you create a folder on your desktop and name it "HJT" locate > C:\Documents and Settings\Administrator\Desktop\HiJackThis.exe << This filecopy "HiJackThis.exe" and paste it into the folder you created on the desktop named "HJT". We do this as HJT needs its own folder to make backups, should things not go as we want !

This will be the path once you have made the above change.

I believe we have some files hiding from us.Please go to the C:\Documents and Settings\Administrator\Desktop\HJT\HiJackThis.exe. Right click on the HijackThis.exe file and select "Rename". Rename it removal.exe,

Dan,thanks very much for your help.I have created a new folder on the desktop and named it "HJT" and copied and pasted the exe into the folder, then opened the folder, renamed the exe from "HiJackThis.exe" to "remove.exe" then ran it. I hit the "Do a system scan and save a log file" button, here is a copy paste of the log file:

ok, I have it transfered to the desktop, and saved there on the comp we are working on.You want me to follow the instructions on the guide page for combofix and then run it as the guide page says or wait for your farther instructions?

Download the file & save it as it's originally named, next to ComboFix.exe.

Now close all open windows and programs, then drag the setup package onto ComboFix.exe and drop it. Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console. When complete, a log named CF_RC.txt will open. Please post the contents of that log.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.